CVE-2026-86098 ntop nDPI versions before 6.0 contain a heap buffer… — CVE Notify — TG.ME

CVCVE Notify@cveNotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.

🎖@cveNotify

GitHub

GitHub - ntop/nDPI: Open Source Deep Packet Inspection Software Toolkit

Open Source Deep Packet Inspection Software Toolkit - ntop/nDPI

t.me/cveNotify/286100

September 4, 2026 22